Privacy Policy

1 Data Controller

838win, operating at https://838win.cam, is the data controller responsible for your personal information collected through our platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.

For all privacy-related inquiries, data subject access requests, or concerns about how your personal information is handled, please contact our Data Protection Officer using the contact details provided in Section 13 of this Privacy Policy.

2 Information We Collect

838win collects several categories of personal information to provide our gaming services, verify your identity, process transactions, and comply with legal obligations. The types of data we collect include:

2.1 Account Registration Information

When you register an account with 838win, we collect:

• Personal Identification: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code)
• Login Credentials: Username, password (stored in encrypted format)
• Account Preferences: Language preference, currency preference, communication preferences

2.2 Identity Verification (KYC) Documents

To comply with international licensing requirements and anti-money laundering regulations, we collect:

• Government-Issued ID: Copy of Indonesian National Identity Card (KTP), passport, or driver's license including photo, ID number, issue and expiry dates
• Proof of Address: Recent utility bill, bank statement, or government correspondence dated within 3 months
• Selfie Verification: Photograph of you holding your ID document for facial recognition matching
• Source of Funds: Documentation proving the origin of funds for high-value deposits, if requested

2.3 Financial and Transaction Data

When you make deposits or withdrawals, we collect:

• Payment Information: Bank account number and name, e-wallet account details (OVO, DANA, GoPay, ShopeePay)
• Transaction History: Deposit amounts, withdrawal amounts, dates and times, transaction reference numbers
• Payment Method: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or other payment providers used
• Bonus and Promotional Data: Bonuses claimed, wagering progress, bonus terms acceptance records

2.4 Gaming Activity and Behavioral Data

To provide gaming services and detect fraud, we collect:

• Betting History: All bets placed including game type, stake amount, odds, results, timestamps
• Game Preferences: Favorite games, most-played categories, session duration patterns
• Responsible Gaming Data: Deposit limits set, self-exclusion requests, reality check interactions
• Customer Support Interactions: Chat transcripts, email correspondence, support ticket history

2.5 Technical and Device Information

Automatically collected when you access 838win:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Network Information: IP address, ISP, geographic location (country, city), time zone
• Usage Data: Pages visited, features used, clicks, time spent on pages, referring URLs
• Performance Data: Load times, errors encountered, crash reports

3 How We Use Your Information

838win processes your personal data for the following specific purposes:

3.1 Account and Service Provision: We use your registration information to create and maintain your account, authenticate your identity when you log in, enable you to place bets and play games, process your deposits and withdrawals, and communicate important account updates.

3.2 Compliance and Verification: We process KYC documents to verify your age (confirming you are 21 or older), confirm your identity to prevent account fraud, comply with anti-money laundering regulations, and meet our international licensing obligations. This processing is mandatory and we cannot provide services without it.

3.3 Security and Fraud Detection: We analyze behavioral data, login patterns, betting activity, and device information to detect suspicious activity, prevent multiple account creation, identify bonus abuse, protect against payment fraud, and secure our platform from cyber attacks.

3.4 Responsible Gaming Protection: We monitor gaming patterns to identify signs of problem gambling, enforce deposit and betting limits you set, implement cooling-off periods and self-exclusion requests, and provide intervention when concerning behavior is detected.

3.5 Marketing (With Your Consent): If you opt in to receive marketing communications, we will send you promotional emails about bonuses, tournaments, new games, and special offers tailored to your gaming preferences. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by adjusting your preferences in your account settings.

4 Legal Basis for Processing

Under GDPR-equivalent data protection standards, 838win processes your personal data based on the following legal grounds:

• Contract Performance: Processing is necessary to provide the gaming services you requested, manage your account, process transactions, and fulfill our obligations under our Terms and Conditions.
• Legal Obligation: We are required by law to verify your identity, prevent money laundering, comply with licensing regulations, report suspicious activities, and maintain transaction records for specified periods.
• Legitimate Interest: We have legitimate business interests in preventing fraud, securing our platform, improving our services, analyzing usage patterns, and protecting against abuse, provided these interests do not override your fundamental rights.
• Consent: For marketing communications and certain optional data processing activities, we rely on your explicit consent, which you can withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal.

5 Information Sharing and Disclosure

838win does not sell your personal information to third parties. We share your data only in the following limited circumstances:

5.1 Payment Processors

We share necessary transaction data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process your deposits and withdrawals. These processors have their own privacy policies governing how they handle your data.

5.2 Game Providers

When you play games from third-party providers like Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others, we share your username and betting data to enable gameplay. Game providers process this data under their own privacy policies and licensing obligations.

5.3 Identity Verification Services

We use third-party KYC verification services to authenticate your identity documents, perform facial recognition matching, and check against fraud databases. These services process your ID documents and photos solely for verification purposes.

5.4 Legal and Regulatory Authorities

We may disclose personal information to licensing authorities, law enforcement agencies, courts, or government bodies when required by law, in response to valid legal process, to investigate fraud or security incidents, or to protect the rights, property, or safety of 838win, our users, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.

5.6 Service Providers

We engage carefully vetted service providers for hosting, data storage, customer support software, analytics, and fraud detection. These providers access personal data only to perform specific services on our behalf and are contractually obligated to maintain confidentiality and security.

Data Processing Agreements: All third parties processing your data on behalf of 838win are bound by written data processing agreements requiring them to process data only according to our instructions, implement appropriate security measures, and respect your privacy rights.

6 Data Security Measures

838win implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by major banks. Passwords are stored using industry-standard one-way hashing algorithms.
• Access Controls: Personal data is accessible only to authorized 838win personnel who require access to perform their job functions. Access is granted based on role-based permissions and principle of least privilege.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, 24/7 monitoring, redundant power supplies, and fire suppression systems. Data is backed up regularly to prevent loss.
• Intrusion Detection: We employ firewalls, intrusion detection systems, and DDoS protection to defend against cyber attacks. Security logs are monitored continuously for suspicious activity.
• Regular Audits: Third-party security firms conduct periodic penetration testing and vulnerability assessments. We address identified vulnerabilities promptly.
• Employee Training: All 838win employees undergo data protection training and sign confidentiality agreements. Access to personal data is logged and auditable.
• Incident Response: We maintain an incident response plan for data breaches. In the unlikely event of a breach affecting your data, we will notify you and relevant authorities as required by law.

Your Responsibility: While we implement strong security measures, you are responsible for maintaining the confidentiality of your password, using a secure internet connection, keeping your device software updated, and promptly notifying us if you suspect unauthorized account access.

7 Data Retention

838win retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law:

• Active Accounts: Personal data is retained for the duration of your account being active and for a period after closure as specified below.
• Transaction Records: Financial transaction data, betting history, and KYC documents are retained for a minimum of 7 years after account closure to comply with anti-money laundering regulations and licensing requirements.
• Support Interactions: Customer support transcripts and email correspondence are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Data: If you unsubscribe from marketing communications, we will retain only the minimum data necessary (email address) to ensure you are not contacted again.
• Legal Claims: Data may be retained longer if necessary to establish, exercise, or defend legal claims, or if required by court order.
• Anonymized Data: After retention periods expire, we may convert personal data into anonymized aggregate statistics (which cannot identify you individually) for analytical purposes indefinitely.

Account Closure: When you close your account or after prolonged inactivity, we will anonymize or delete personal data not subject to legal retention requirements within a reasonable timeframe, typically 30-90 days.

8 Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal data we hold about you, including details of how it is processed. We will provide this information free of charge in electronic format within 30 days.
• Right to Rectification: If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations. Note that we cannot delete transaction records required by law.
• Right to Restrict Processing: You can request that we limit how we use your personal data in specific situations, such as while we verify data accuracy following a correction request.
• Right to Data Portability: You have the right to receive personal data you provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority.

Exercising Your Rights: To exercise any of these rights, please contact our Data Protection Officer using the contact information in Section 13. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request to protect your security.

9 Cookies and Tracking Technologies

838win uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and improve our services. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for the platform to function properly. These cookies enable account login, session management, security features, and payment processing. They cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use our platform, such as most visited pages, error messages encountered, and load times. This helps us optimize performance.
• Functional Cookies: Remember your preferences (language, currency, favorite games) to provide a personalized experience. Disabling these cookies may affect functionality.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness. These cookies require your consent and can be disabled in cookie settings.

Managing Cookies: You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies will prevent you from using certain features of 838win. Instructions for managing cookies vary by browser; consult your browser's help documentation for guidance.

10 International Data Transfers

838win primarily serves players in Indonesia, but our technical infrastructure, payment processors, and game providers may be located outside Indonesia. When we transfer personal data internationally, we ensure appropriate safeguards are in place:

• Adequacy Decisions: We transfer data to countries recognized as providing adequate data protection standards.
• Standard Contractual Clauses: For transfers to countries without adequacy decisions, we use European Commission-approved Standard Contractual Clauses (SCCs) to ensure legal protection.
• Data Processing Agreements: All international service providers sign agreements requiring them to implement appropriate security measures and respect your privacy rights.
• Encryption in Transit: All international data transfers are encrypted to protect against interception.

By using 838win, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

11 Children's Privacy

838win is strictly for adults aged 21 and over. We do not knowingly collect, use, or disclose personal information from individuals under 21 years of age. Our registration process requires date of birth verification, and we conduct KYC checks to confirm age eligibility.

If we discover that we have inadvertently collected personal information from someone under 21, we will immediately delete that account, erase all associated personal data, and forfeit any remaining balance in accordance with our legal obligations.

If you are a parent or guardian and believe your child has provided personal information to 838win, please contact us immediately using the details in Section 13 so we can take appropriate action.

12 Changes to This Privacy Policy

838win reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on our website
• Sending an email to the address registered on your account
• Requiring you to acknowledge the updated Privacy Policy upon next login for significant changes

The "Last Updated" date at the top of this document indicates when the Privacy Policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Continued use of 838win services after Privacy Policy changes become effective constitutes acceptance of the revised policy. If you do not agree with the updated terms, you should discontinue using our services and may request account closure.

13 Contact Information

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal data is handled, please contact our Data Protection Officer: